Lucene search
+L

5 matches found

OSV
OSV
added 2026/08/18 8:05 p.m.12 views

CVE-2026-65985 FUXA: SSRF hardening for `device-webapi-request`

FUXA is a web-based Process Visualization SCADA/HMI/Dashboard software. In 1.3.2 and earlier, the device-webapi-request Socket.IO handler in server/runtime/index.js permits an authenticated non-admin runtime user to control property.address, causing the FUXA server to issue an outbound HTTP or...

6CVSS5.5AI score
SaveExploits0References6
Rows per page
Query Builder